Paul's Down-Home Page

The Anti-Phishing Working Group has posted their phishing trends report for January 2006. The group reports 9,715 unique phishing sites in the month of January, up almost 35% from December 2005. That’s pretty scary. It’s interesting to see what major collaboration and messaging vendors are doing to address the problem, too: IBM and Oracle are ignoring the problem, while Microsoft’s already added anti-phishing features to Outlook 2003 SP2 and has shown both server- and client-based solutions for Office 2007 and Exchange 12.

From Chris Scharff, a pointer to Hz, a new service that works with mobile devices. You send mail to a special email address (like, say, hzFlightInfo@hz.com), and you get back a set of requested information. This is akin to the IM bots that let you do web searches or get product information, but it doesn’t require a special client, and it doesn’t require you to have data service on your device– if you can get email, you can get Hz service. There are agents for geolocation services (where’s the nearest ATM?), travel (is my flight delayed? when’s the next flight from point A to point B?) and others. I’ll be playing with this to see how well it works in practice.

My main homie Jim McBee has been working on a new e-book for RealTime Publishers: the Tips and Tricks Guide to Secure Messaging. It’s available as a free download (registration required) from Microsoft.

Jim also has a new book coming out May 1 — Microsoft Exchange Server 2003 Advanced Administration (see?) It’s basically the second edition of Exchange Server 2003 24Seven, so it’s probably going to be worth picking up.

Arik Hesserdahl at BusinessWeek says that Apple needs a security czar. So does Microsoft’s Stephen Toulouse. So, I sent Steve Jobs a letter touting my qualifications for the job. We’ll see what happens.

I used to have separate categories for posts about Workplace and Oracle Collaboration Suite, but now that I’m starting to work with Zimbra and Scalix, I figured I’d lump all the non-Exchange material into a single category so that people who aren’t interested will only have one category to skip. Thus, the new “Non-Exchange” category.

Devin, Missy, and I will be doing a book signing for the Exchange Server Cookbook at the Orlando Exchange Connections show next month. The signing’s at 3:30p on 10 April; see O’Reilly’s page for details. C’mon by and say hello!

This is super cool: Microsoft’s started a series of Exchange podcasts (in both WMA and MP3, naturally!). This is a very smart move on the Exchange team’s part, since it will unlock their webcast content and deliver it to a much broader audience. I was hoping to find the Exchange 12 preview webcasts from last week in podcast form; no word on whether that content will be added later.

Sweet! Microsoft has an annual security conference called BlueHat (see MikeHow’s comments on the 2005 version), and this year they’ve started a blog to cover it. Sadly, the blog is a retrospective, since the conference was actually last week. Still, this should make for intersting reading.

Cool script from the Windows Mobile team blog; it creates a CertificateStore CAB file, containing the root certificate of your choice, directly from the command line.